ON THE DISTRIBUTION OF THE NUMBER OF POINTS ON A 
FAMILY OF CURVES OVER FINITE FIELDS 



KIT-HO MAK AND ALEXANDRU ZAHARESCU 

Abstract. Let p be a large prime, £ > 2 he a positive integer, m > 2 be an 
integer relatively prime to I and P{x) G If"p[a;] be a polynomial which is not 
a complete £'-th power for any £' for which GCD{£' , £) = 1. Let C be the 
curve defined by the equation = P(x), and take the points on C to lie in the 
rectangle [0,p— 1]^. In this paper, we study the distribution of the number of 
points on C inside a small rectangle among residue classes modulo m when we 
move the rectangle around in [0,p — 1]^. 



1. Introduction 

Since Weil's proof of the Riemann hypothesis for algebraic curves over finite 
fields [28^, there have been numerous studies on the number of rational points of 
an algebraic curve over a finite field in a specified set of number theoretic interest. 
Examples include studies of bounds on the number of rational points in a smaller 
region inside [0,p — 1]^ (see for example Myerson [17], Fujiwara |Tl], and (16]), 
bounds on the number of points in sets with prescribed congruence conditions on 
the coordinates (known as Lehmer problems, see for example Zhang [3TJ[32], Cobeli 
and one of the authors ffj and Bourgain, Cochrane, Paulhus and Pinner f2|), bounds 
on the number of visible points (see Shparlinski [23], Shparlinski and Voloch 
Shparlinski and Winterhof [IS], Chan and Shparlinski [S]) and the fluctuations of 
the number of points among some families of curves (see Kurlberg and Rudnick 
[13) . Xiong [23 and Bucur, David, Feigon, Lalm [3l|4]). Bounds for the number of 
rational points on curves in a small rectangle is crucial in the study of local spacings 
between fractional parts of n'^a, see Rudnick, Sarnak and one of the authors [20ll30j . 
Such questions have applications in mathematical physics, see the important works 
by Berry and Tabor [1], Rudnick and Sarnak [19 and Sarnak [21] . 

All the above works study analytic aspects of the number of points of families of 
curves over finite fields, such as bounds on the number of points and the fluctuation 
of the number of points along a family. In this paper we study an arithmetic 
property of the number of points on curves of the form 

(1.1) /^P{x) 

over Fp, when the curve is absolutely irreducible. To make it precise, we take the 
rational points on the curve C as a subset in [0,p — 1]^, and let il C [0,p — 1]^ be 
a rectangular "window". Instead of asking how many points are captured by f2, 
we ask the following question: if we move the window around the domain, what 
is the probability that the number of captured points is even (or odd)? This kind 
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of problem dates back to Gauss when he proved the weU-known Gauss lemma for 
quadratic residues, i.e. if GCD{a,p) — 1, then if r is the number of elements in 
the set {a, 2a, . . . , i^^)a} that have least positive residue greater than p/2, then 
the Legendre symbol satisfies - = (—1)''. Formulating in our language, this is 
to consider the number of points on the line y — ax inside the rectangle [1, (p — 
l)/2] X {p/2,p— 1], and then look at its residue class modulo 2. We also note that 
the uniformity modulo m of the values of some multiplicative functions, such as the 
Ramanujan tau function, was investigated by Serre [22]. For more results on the 
uniform distribution of the values of multiplicative functions modulo m, the reader 
is referred to the monograph of Narkiewicz [18] . Recently, Lamzouri and one of the 
authors [15) have studied the distribution of real character sums modulo m. 

In the present paper, given a positive integer m, we ask about the distribution 
of the number of points captured by the window n among each congruence class 
of m when we move it around the domain. Since it is believed that the set of 
rational points on a curve exhibits a strong random behaviour, one may expect 
that the above mentioned probability is 1/m. We prove that this is indeed the case 
when fl has full length in the y-coordinate in Theorem [TJ Next, we consider the 
joint distribution of the number of points on several different curves of the same 
form as (jl.ip . We will see that under some natural conditions, the distributions 
on these different curves are independent. After that, we show that restricting the 
y-coordinate of the rectangle will retain the uniform distribution among residue 
classes modulo m. Finally, we will give an application on the distribution of £-th 
power residues and nonresidues in the last section. 

The idea here is to relate our problems of studying the distribution of number 
of points modulo m to that of random walks on the additive group Z/mZ. The 
idea is to use results on random walks showing that the distribution modulo m 
in the random walk situation is uniform, and then show that the difference from 
our problem to that of the random walks can be handled, so that we get uniform 
distribution modulo m in our context as well. For information on random walks on 
finite groups, the reader is referred to [121 126] . One important feature of our result 
is that uniform distribution occurs already when we consider the number of points 
in very short intervals. 

2. Statement of Main Results 

We first fix some notations. Let p be a large prime and let £ > 2 be an integer. 
For a polynomial P{x) G ¥p[x], let C be the curve over Fp defined by the equation 

= P(x). Let / be a fixed positive integer (which will serve as the length of our 
rectangles). Define Nc{xo,T) to be the number of points on C inside the rectangle 
Rx„ = {xo,xa + /] X [0,p- 1], i.e. 

NcixQ,I) = #{{x,y) e C{¥p) -.XQ <x<xo + I}. 

Let T C [0,p — 1] be an interval, and denote \X\ = #(Xn Z). For any m with 
GCD{m,£) = 1, we define ^p{P,m,a) to be the proportion of values xq G T such 
that Nc{xo,I) = a mod m, i.e. 

^c{m,a) = <Xo<p~l: Nc{xo,I) = a mod to}. 

Our first result is that when one moves the rectangles Rx^ along the x-direction, 
the Nc {xq , I) becomes uniformly distributed modulo m. Note that the distribution 
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and the main term of the discrepancy does not depend on the lengths of the intervals 
/ and I, nor the particular position of X as long as the conditions in the theorem 
are satisfied. 

Theorem 1. Let-p he a large prime and P{x) G Fp[a:] be a nonconstant polynomial 
of degree d which is not a complete i'-th power for any £' with GC'D{f , £) = 1. Let 
L = L{p) < 2io|4d '^'^ integral function of p such that L{p) — !■ oo as p ^ oo. 

Suppose X is an interval such that X 3> for some e > 0, and I is an integer 

with p — L > I > L. Then for any positive integer m with GCD{ni, £) = 1 we have 



'^V 1 y 7m'£^ (mH^L{p)^\ogp 




Corollary 1. Assumptions and notations are as in Theorem\^ If "rn — o{L{pY^^) 
then 

TO 

uniformly for all < a < 1. 

Remark 2.1. Our assumption that GCD{m,£) = 1 is necessary in order to obtain 
uniform distribution. For example, if we consider the elliptic curve E defined by 
y2 _ ^3 _ Yi'^gr^ then for each x 0,n, ~n, either there are two y so that {x,y) e 
E{¥p), or there are none. Thus Ne{xo, I) is almost always even, and so one cannot 
have uniform distribution modulo 2. We remark that the distribution modulo 2 in 
this example depends on the location of the roots of the polynomial P{x) = x^—n^x. 

Although one cannot expect uniform distribution for a particular p when to and 
£ are not relatively prime, it may still be possible to have uniform distribution when 
we take an average over p. For example, let Ep be the elliptic curve y^ = x^ + x over 
Fp, and let m = 2. The distribution of Ne{xo, I) for a particular prime p might not 
be uniform, but instead depends on the locations of the roots of + 1 mod p. Now 
we take A'^ to be a large integer, and take an average over all primes p = 1 (mod 4), 
p < N (here for each p we normalize the points in Ep by {x,y) i— (^, so that 
we have a fixed domain for all p). By a well-known result of Duke, Friedlander 
and Iwaniec [9] , the fractional parts ^ of the roots of + 1 mod p are uniformly 
distributed as p varies. Therefore, the average values over p < N of the number of 
points inside a rectangle {xq + I) x [0,1) will be uniformly distributed modulo 2 
when Xq varies. 

After studying the distribution of the number of points on the curve C, we 
continue to consider the joint distribution of the number of points on curves of the 
form 

Cr./^P,{x) 

for 1 < ^ < fc, where A; is a positive integer, and all Pi(x) G Fp[a;] are polynomials 
that are not complete £-th powers. Define 

A^,(a;o,/) = Nc,{xo,I) ^ if{{x,y) e Ci{¥p : x^ < x < xo + I}, 

and for any vector a — (ai, . . . , Ofc) G Z*"', 

4>(to, a) = |4#{0 <xi<p-l:Ni{xi,I) = ai mod to VI < Z < k}. 
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Our first observation is that various iV;'s might not be independent of each other. 
Remark 2.2. For example, let i = 3, Pi{x) = x and P2(x) = x^ , i.e. 

Ci -.y^ = x, 

C2 ■.y^^x\ 

Then wc claim that Ni{xo,I) — N2{xq,I) for any xq and /. Indeed, fix an x. If 
X — 0, then both curves have a unique y. If a; 7^ and Ci has a point {x,y), then 
{x,y'^) is a point on C2. Conversely, if x ^ and {x,y) is a point on C2, then 
(x, y"^ /x) is a point on Ci. Therefore, A^i = N2 as the number of points above any 
X is the same for both curves. As an immediate consequence, for any a = (ai, 02), 
we have 

^1 \ J m i0.i—a2, 

$(m,a)=<^" 

[0 ,ai7ta2. 

In view of the above remark, it is natural to introduce the following conditions. 
Let Pi(a;), . . . , Pk{x) € 'Pp[x\ be polynomials. We say that the set {Pi (a;), . . . , Pfc(x)} 
is multiplicatively dependent if there exists integers (which may be positive or neg- 
ative) ei, . . . , e; such that the combination 

Q{x) = p^ixY' . . . Pkixy- 

is identically 1. The set of polynomials is multiplicatively independent if it is not 
multiplicatively dependent. 

If the polynomials are multiplicatively independent, we have the following result. 

Theorem 2. Let k > 2 be an integer. Letp be a large prime and Pi{x), . . . , Pk{x) G 
¥p[x\ be nonconstant polynomials of degree di,...,dk respectively, which are not 
complete i'-th powers for any £' with GCD(i' ,i) = 1. Let d — maxjdi, . . . , d^}. 
Suppose that the set of polynomials {Pi(a;), . . . , Pk{x)} is multiplicatively indepen- 
dent. Let L ~ L{p) < 2 log 4c; '^'^ integral function of p such that L{p) —> 00 as 
p 00. Suppose I is an interval such that I ^ p^'^^ for some e > 0, and I is an 
integer with p — L > I > L, then for any positive integer m with GCD{m, €} = 1, 
we have 

V- f^, , iV Im^+'^e ^ /dfcL£W-+2^1ogp\ 

ae(Z/mZ)'= ^ ^ \ I I / 

An immediate corollary of the above theorem is that the Ni{xq, I) are indepen- 
dent. More precisely, we have the following. 

Corollary 2. Assumptions and notations are as in Theorem\^ Ifm = o(L(p)^/('^'^+^)), 
then 

uniformly for all aE (Z/mZ)'''. 

So far we did not restrict the y-coordinates of the curves C. Our next objective 
is to see if a restriction of y-coordinates will affect the distribution of the number of 
points into various congruence classes. For the sake of simplicity, we only consider 
the case when each x-coordinate has at most one corresponding y-value in the 
restricted domain such that {x,y) e C. 
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To be more precise, we let T^JQ [0, p— 1] be two intervals such that the following 
condition holds: 

(*) Vx G I, 3 at most one y ^ J such that (x, y) E C. 

Denote fl = I x J', and define 

NcM^o,!) = y) e C(Fp) n : < x < xq + /}, 

and 

^c.Q.{m, a) = -#{0 < a;o < P - 1 : ^c, 0(2^0, 1) = a mod m}. 
P 

Bringing into play some ideas from algebraic geometry, we prove that the numbers 
Nc,n{xo, I) are uniformly distributed among the residue classes of m. Note that 
due to condition Q, we do not need to assume that GCD{m,£) = 1 in this case. 

Theorem 3. Let p be a large prime and P{x) G ¥p[x] be a nonconstant polynomial 
of degree d which is not a complete £'-th power for any £' with GCD{£' , £) = 1. Let 
L = L{p) = o(logp/ loglogp) be an integral function of p such that L{p) 00 as 
p — )> 00, and let L is an integer with p — L>L>Lisan integer and let D, = X x 
be a rectangle such that condition ([*]) is satisfied, \ J'\ — ap for some < a < I7 
and \X\ 3> for some 6 > 0. Then for any positive integer m, we have 



for all e > 0. 



a=0 



Corollary 3. Assumptions and notations are as in Theorem\^ Ifni = o{{L{p))^/^), 
then 

1 ( \ 

*c,n(m,a) = — + 0\ -j== , 

uniformly for all < a < m — 1. 

Finally, we will apply our results above to study the distributions of power 
residues and nonresidues. In particular, we obtain the following result, which says 
that for any fixed power residue class, we can find a representative in almost all 
short intervals in [0,p— 1]. 

Corollary 4. Let £ > 2 be an integer, and let L{p) be an integer function of p 
that tends to infinity as p tends to infinity. For any £-th root of unity /i and for all 
xo G [0,p — 1] except possibly 0{p/ L{p)^/'') of them, there is an x inside the interval 
[a;o,a;o + L{p)) with — /i, where (-)£ denotes the £-th power residue symbol. 

For more results on the distribution of quadratic residues and nonresidues in 
short intervals, or the distribution of more general multiplicative functions in short 
intervals, the reader is referred to the works of Davenport and Erdos [8 , Chaterjee 
and Soundararajan [6] and Lamzouri [14'. 

3. Preliminaries 

In this section we collect together some preliminary results which will be used 
later. The first few lemmas show that certain combinations of polynomials which 
arc not a complete £'-th powers cannot become a complete £-th power. 
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Lemma 3.1. Let r > 2, xi,...,Xr G Fp 6e r distinct elements. Suppose M 
is a nonempty finite subset of the algebraic closure ¥p with 4|A^| < p^. Then 
there exists a j € {1, . . . ,r} such that the translate Ai + Xj is not contained in 
Ui^j{M+Xi). 

Proof. Suppose (xi, . . . ,Xr,M) provides a counterexample to the statement of the 
lemma. Then it is clear that for any nonzero t € Fp, the tuple {txi, . . . , tx^, tA4) is 
another counterexample. 

We now use Minkowski's theorem on lattice points in a convex symmetric body 
to find a nonzero integer t such that 



<p-l 



Thus there are integers yj such that 
(3.1) 



\\yj\ <p{p-i)-^ 

{Vj =txj (modp) 

for any j £ {1, . . . , r}, and (yi, . . . , y^, tA4) provides a counterexample. Now let 
jo be such that \yjg\ = maxi<j<r \yj\. Choose a e tA4 and consider the set A4 = 
tM n (a + Fp). Then {yi, . . . ,yr,M) will also be a counterexample. 

Note that a + Fp can be written as a union of at most \ intervals (i.e. subsets 
of Fp consisting of consecutive integers or its translate in Fp) whose endpoints are 
in A4. Let {a + a, a + a + 1 , . . . , a + b} be the longest of these intervals. Then 

^-\M\-\M\ 
By this, p.ip and the hypothesis 4 \M\ < pi , we have 



\b~a\>Ap'-- > 2|2/,J. 

Now if j/j,, > 0, then a + a + yj^ belongs to + but does not belong to 
Lli^jg{M + yi), while if yj^ > 0, then a + b + yjg belongs to + yj„ but does 
not belong to Ui^j„{Ai + yi)- This contradicts the fact that {yi, . . . ,yr, Ai) is a 
counterexample, and thus completes our proof. □ 

Now we are ready to prove the promised result about combinations of polyno- 
mials. 

Lemma 3.2. Let £ > 2 be an integer. Let P{x) £ ¥p[x] be a polynomial which 
is not a complete i'-th power for any I' with GCD{1' ,t} — 1. Let 6i, . . . ,6^ be r 
distinct elements in Fp with r < (logp)/ log(4degP). Then for any a € Fp and 
e — (ei, . . . , Cr) with < Cj < ^ — 1, e 7^ 0, the polynomial 



Q(x) = J]P(c 



b,Y 



is not a complete £-th power. 
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Proof. The lemma is clearly true for all £ when r — 1. Suppose the lemma is not 
true, then there is a least r > 1 (but satisfying our assumption r < (log p) / log(4 deg P)) 
such that a counterexample exists. Let £ be the least £ such that a counterexample 
occurs for the above r, then we have 

r 

(3.2) Q{x) = P{xy = Y[ P{ax + b^f^ , 

where 1 < ij < £ (if ej = for some j we would have a smaller counterexample) 
and P{x) e ¥p[x]. 

Let ai, . . . , as be all the distinct zeros of P{x) in Fp. Without loss of generality 
we may assume that the multiplicities rrij of each aj satisfy 1 < mj < £. Clearly 
1 < s < deg P. Let Ai = {a~^ai, . . . ,a~^as} and xj = —a~^bj for all 1 < j < r. 
Note that M + xj is the set of zeros of P{ax + bj). Since 4 = 4s < 4degP < 
p7 < pP" , we can apply Lemma 13.11 to obtain a jo such that at least one of the 
roots of P{ax + bj^) is distinct from the roots of all other P{ax + bi) for i ^ Jq. By 
permuting the Xj and aj we may assume that the above occurs for jo = r, and the 
distinguished root is as, which has multiplicity mg. 

If rUs is relatively prime to £, then e^TOs cannot be a multiple of £. This means 
the combination Q{x) cannot be a complete £-th power, which contradicts (|3.2I) . 
On the other hand, if GCD{ms,£) = ^ > 1, then p.2p implies that must be 
multiple of d. Since d < £, we see that 



a 



r-l 



P{ax + brYr \p^ax + br)-^j 

is a complete d-th power. Thus either there exists some Cj which is not a multiple 
of d, so p. 31) is a counterexample with smaller r, or each Cj is a multiple of d, then 

r 

Q{x)-^ = P{x)-^ = [| P{ax + 6,)^ 

is a counterexample with the same r but a power smaller than £. In both cases we 
obtain a contradiction. □ 

For any positive integer m, denote em{z) — e^'^*^/™. Denote by the set of 
£-th roots of unity. For any vector w e /i^, define 



(3.4) F{v) = l + v + ...+v 



otherwise. 



We introduce the following probability model for the values of F{v) based on 
random walks. If an ^-th root of unity v is drawn at random, and the probability 
that each root being drawn is l/£, then F{v) = £ with probability \/£ and F{v) = 
with probability {£— !)/£■ Inspired by this fact, we let {Xj}, {Yj} be two sequences 
of independent random variables so that 

£-1 

P{Xj =£) = !/£ and P{Xj = 0) = 
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and the same for Yj. We consider the stochastic process {Zx mod 'm}x>i, where 



This can be viewed as a random walk on the additive group Z/mZ, with each step 
being the random variable Xj — Yj. We are interested in the random variable 



m, a) — — \{x < L : — a (mod m)}| . 



Part HI) of the following proposition is in essence saying that the difference between 
<i>(L; m, a) and the expected value 1/m is not too large. Part of the proposition 
is a high dimensional version of part ([Ij, and part ([3]) is modeled on a slightly 
different situation under the same idea. 

Proposition 3.1. Let L be a positive integer. 

(1) Let V — {vi, . . . ,vl),'v' — {v[, . . . ,v'j^) £ . Suppose GCD{£,m) — 1, then 



E E 



a=0 



v,v'6/i| 



L m—l 



EE^™ mE^(-.)-E^K) 



< Im'Ll 



4 r ,?2L+2 



(2) Let k he a positive integer and a — (ai, . . . ,afc) G {"L/rnL)^ . For 1 < I < k, 
let V/ = ■ . ■ , vi,l),v'i = [v^i, . ■ . ,v'i^]^) e /i^. Suppose GCD{l,m) = 1, 
then 



E E 

ae(Z/mZ)'= v,,v',e/j^ 
l<Z<fe 



E E ^™(e^E^(-'^.)-E^K.)-«' 

a;=lt=(ti,...,tfc)#0 \i=l \i=l J = l 



(3) //v=(^;l,...,^;L),v' = K,...,^;i^)e{0,f}^ t/ien 



m— 1 



E E 

a^O v,v'e{0,l} 



L m — 1 



E E ^™ M E - E - " 



= 1 i=i 



DISTRIBUTION OF THE NUMBER OF POINTS ON CURVES 

Proof. (H]) follows from ^ by taking k = I. For ([2]), consider 



E 



EE^™ (EME^K.)-Em.)-«' 

x = lt^O = l \j = l j=l 



xi 



^ E EE^™ E^'a E^^K.)-E^K.)-«' 

Vi.v'iGMf \a:i = lti#0 ^ = 1 \j=l j=l 

X I E E ^™ (-E^'-2 (E^^K.)-En<,)- 

k 

= E EE ne™(°'(^'.2-iu)) 

vi.v'iGfif l<a;i,a;2<L ti,t2#0 ;=1 

(3.5) 

xe„. I ^ (Ei^K,)-Ej^«,) I (En«/..)-E^K.) 



Here ti = . . . ,tk,i), and similarly for t2. 

We now sum over all a; with < a; < — 1 and use the orthogonality relation 



/, , XX \m, ti,i = 



Then p.Sp becomes 



E E E 

A: / a;i 



E^ME^k^)-E^K.)-E^(^'-^) + E^K: 



We separate the terms with xi = X2 for which the looped sums inside the exponen- 
tial vanish, which gives the total ra^{m^ — 1)LP^^ . For the remaining terms, note 
that the looped sum for a particular pair is the negative of that of its reverse pair. 
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So the above sum is 

t^O l<xi<X2<L vi,v'i£fj.f 

k I X2 Xi 



j=a;i+l 



-t, E ^K^-)- E ^«.) 

\j=2;i+i j=Ki+i 
(3.6) 



£2 



where in the penultimate step, we used 



For GCD{e,m) = 1, we have 



cos 



2Tr£t 



< 1 - 



for any 1 < < < to — 1. Hence, 

{e^{it)+e-l){e,n{^it)+l-l) _ £2_2£+2 + 2(£-l)cos2if 



£2 



(3.7) 



< 1 - 



<'2 

2(£-l)(l-3!^) 



£2 



Fix X2 — xi — d. For each 1 < d < L — I, the number of (xi,X2) with 1 < xi < 
X2 < L with X2 — xi = d is L — d. So (j3.7p imphes 



E 



l<2:i<2:2<i> 
L-1 



(e„(£t)+£-l)(e™(-£t) + £-l) 



£2 



2(^-l)(l-3^) 

£2 



<3to2£2l 



DISTRIBUTION OF THE NUMBER OF POINTS ON CURVES 



11 



after some simplification. For any t ^ we have a nonzero coordinate for which 
the above calculations apply. Thus 

k 



p 



E E n 

t^O l<xi<X2<L 1 = 1 

Part (HI) now follows easily by inserting the above estimate in 
For we derive as above that 



(3.8) E 



L 7n — l 



X X 



E E M E - E 



x=l t=l 



m — 1 



X2 



X2 



TO(m - l)2^^i + TO ^ ^ E ^" 

t=l l<a:i<a;2<L v,v'e{0,l} 



M E E 



j=xi+l j=xx + l 

X2 X2 

1 1 . 

3 



E - E 

Lj = 2;i + 1 j = 2;i + l 



Here from 



and the inequality 



e„i(tw) = 1 + e„(<) 

"£{0,1} 



cos I cos — 

TO 



< 1 



2>rv? ' 



we see that the second term in p.Sp is 

7n — 1 

2.2-TO^ E 



t = l l<Xi<X2<L 

L-1 



(l + e,„(t))(l + e,„(-^t)) 



=22^+iTO2^(L-d) cos 



:=i 

L-l 



< 



d=l 



22^+1to2L I 1 



2 \ 1 - 1 



3to^ 



2L-2 



3m^ 



<22^+1to4l. 

Substituting this back into p.Sp completes the proof of 



□ 



The next lemma is the classical Weil bound for incomplete exponential sums over 
Fp. Let Xi be a nontrivial multiplicatively character of order £. For a polynomial 
P{x) S Fp[x] of degree d and an interval I C [0,p — 1], define 



&(p)-ExK^(^))- 
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Lemma 3.3. If P(x) is not a complete i-th power, then 

\SxiP)\ < 2(d+l)v^logp. 

Proof. If I is the complete interval [0,p~ 1], the result follows from Weil's estimate 
|27| . The same estimate hold for the sum: 

(3.9) ^ xi{Pi^))ep{-tx) <id+l)^ 

x£ia,p-i] 

for any t E ¥p. If I is not the complete interval, let In Z = {a, a + 1, . . . ,b}. We 
use a standard method to express the incomplete sum Si{P) in terms of complete 
sums. More precisely, we have 

a;e[0,p-l] \^ nelt mod p j 

Changing the order of summation and using p.9p . we get 



\Sx{P)\ 



Xe{P{x))ep{-tx) 



I E (e^.m) E 

t mod p VnGi / yiefO.p-l 

E (E^fM) 

mod p \n^X / 

epit{a + 1)) ~ epit{b + I)) 



P 



-{d+l)^\\I\ 



E 

t^O mod p 



(3.10) 



-(d + i)vp(|x|+ Yl T-ir 

\ t#0 mod p ' ^ 



1 - ep{t) 

lv)\ ■ 



Since |sin(t7r/p)| > we obtain 



E 



1 2p 4 , 

l(t7r/p)| IT 1^1 -n- 



mod p ' V - ' ' I f=i I I 

Inserting the above estimate into p.lOp . we obtain 

\Si{P)\ < i(d+l)v^(|X| + lplogp)<2(d+l)v^logp. 
p n 

This finishes the proof of the lemma. 



□ 



4. Distribution of the number of points in residue classes: proof of 

Theorem [T] 

Recall that we are studying the curve 

C: y' = P{x). 

We defined the quantities 

Nc{xo, I) = #{ix,y) e C(Fp) : xo < x < xo + I}, 
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which is the number of points on C inside a rectangle of some fixed length /, and 

$c(™,a) = l^^'f^ <XQ<p-l: Nc{xo,I) = a mod m}, 

which can be regarded as the probability of the occurrence of Nq^xq, I) = a mod m 
for xo G T. 

Let A'^ be a large number, x\^...^Xr G Fp be distinct points and let x = 
(xi, . . . , Xr)- Let ^(2;) € Fp be a polynomial of degree d, and v = (ui, . . . , Vr) G 
Suppose L 7^ is an integer, and define 

(4.1) Mp(v) = Afp,,,Ar,fe(v,x) = {0 < z < AT : xK^(«i + ^i)) = VI < j < r}. 

This will serve as our bridge between the character values and the random walk 
setting. The following proposition estimates the size of Afp(v). 

Proposition 4.1. If r < (logp)/ log(4(i) and P{x) is not a complete £-th power, 
then for any v G /i^, we have 

Proof. The number of points a; £ Fp with P{x) = is O(degP) = 0{d). Hence, 
there are N + 0{d) indices i such that P{iL + Xj) 7^ for all I < j < r. For those 
i, we have 



-f\ F{vT\g{P{tL + x )))^ ' 

j-i ^ l*^ ' otti*5rwise, 

where F{v) is defined in (13.41) . Thus, 

N r 

#Mp{v) = ^ ^ n F{vj\i{P{^L + X,))) + 0{d). 



i=0 j = l 

Expanding the above product and changing the order of summation, we obtain 

(4.2) #Mp(v) = ^ + l v^-.^r- 

e=(ei,...,e,)5^0 

0<ei<f-l 



N 

X 

i=0 



^ Xi{P{iL + x^)Y' . . . XiiPi^L + Xr))'" + 0{d). 



Since the Xj are distinct points on Fp and r < (logp)/log(4degP), Lemma |3^ 
shows that the polynomial 

Q{i) ^ P{iL + xi)"^ . . . P{iL + Xr)""- 

is not a complete ^-th power. Hence, by Lemma 13.31 '^^ have 

N 

XI {P{^L + XiY^ . . . P{lL + Xr)'-) 



< 



2(dr(^~l) + l)v^logp. 



Inserting the above estimate back into (j4.2p . we obtain 

#MHv)<f + 2^t<y^V5iog. + o«i). 



□ 
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We are now ready to prove Theorem [TJ 



Proof of Theorem\^ Let L = L{p) < 
/L]-l. Define 



2 log 4c! 



be a large number, and let N = 



Rp,m,a{i, L) — #{1 < X < L : Nc{iL + x,I) = a (mod to)}. 



We have 



(4.3) 



< 



1 ^ 
irl 51 



j=0 



Rp 



O 



L 



By the Cauchy-Schwarz inequahty, 



^ N 

E 



Rp.m,a{h L) 

TO 



N 



i=0 



< (iv+i)y i?p,„,„(i,i)-- 

\ TO 



Puttmg this back into (|4.3p . we obtain 



AT 



i=0 



(4.4) (^$c(TO,a)-lj < ^^^(i?p,„,(j,i) 
Now note that 



LV ^ 

+ 



Nc{iL + X, /) = Nc{iL, + FiXi{P{^L + 1 + j))) - ^ F(x£(P(*L + j))), 
so if we set 



m 

X X 

Fixi{P{iL + 1 + j))) - J2 FixdPi^L + m = b (mod m)} 
and use the substitution b = a + Nc{sL, /), then 



m-l JV ^ r \ ^ m-l N ^ , 

(4.5) 5: y (Rp.,nA^,L) - - = 5: 5: i?i..™,,(.,i) - - 

a=0 1=0 ^ 6=0 j=0 ^ 

Using the orthogonality of character sums, we get 



R'p,m,b{h L) 

L m — 1 / / X X ^ 

= E E M E +i+j))-Yl p(xdP{^L + j)) - b 



x = l t=0 



i=l 
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and hence 

N 



i=0 



1 ^ 



L m— 1 



i=0 



EE 

L m— 1 

EE 



i E Pixe{P{iL + I + j))-Y^ F{xi{P{iL + j))-b\-L 



t=l 



(4.6) 



A E 



L m— 1 

EE< 



ME^(^^)-E^K)-^ 



#Afp(w), 



where Mp(w) is defined in (|4.ip . with v = . . . , w^), v' = (wj^, . . . , w^), w — 
{vi,...,VL,v[,...,v'^), and 

X = (ii + / + 1, . . . , + / + L, zL + 1, . . . , iL + L). 

Note that as p — L > I > L, the entries in x are indeed distinct. Putting (|4.6p 
back into (|4.5p . applying Proposition l3.1p ]) and ProDOsition l4.11 we have after some 
simplifications 



m-l N 



EE(^^--(^'^)-^ 



O 



m 



^i^L^Ny/p\ogp 



Combining this estimate with (|4.4p . we obtain 



rn-l . ^ s 2 

Er'cKa)-- < 



L 



O 



This completes the proof of Theorem [TJ 



□ 



5. Joint distribution among curves: proof of Theorem [2] 

Before we prove Theorem [21 we need a generalization of Proposition 14.11 Let 
xi, . . . ,Xr S Fp be distinct points, and let x = (xi, . . . , Xr)- For 1 < / < fc, let 
Pi{x) S Fp be polynomials of degree di, d = di + . . . + dk, and v; = {vi^i, . . . ,vi^r) & 
11^. Suppose i ^ is an integer, and define the set 

Mp,,...^P,(vi, . . . , vfc) = {0 < i < iV : XiiPii^L + Xj)) = w;,, VI < j < r, 1 < / < fc}. 

Proposition 5.1. Assume the Pi{x) are not complete i-th powers, and the set 
{Pi{x), . . . , Pk{x)} is multiplicatively independent. If r < (logp)/ log(4(i), then for 
any Vi, . . . , v/j, we have 

N 2dkr(i — 1) + 1 
#Ma,...,P,(vi,...,Vfe) = j^ + '-jj^ ^\ogp + 0{d). 
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Proof. Wc follow the same idea as in the proof of Proposition 14. II For those x G Fp 
which are not roots of any Pi, we have 

k r 



1=13=1 



1 , if i e A/pj,...,p^(vi, . . . , Vfc), 
, otherwise. 



So, 



N k 



#Mpu...,P.(yi,- • • ' vfc) = ^ E n n F{vj\,{Pi{iL + X,))) + Oid). 

i=0 1=1 j=l 

Expanding the above product, we obtain 

k r 



(5.1) #Mp„...,p, (VI, . . . , V,) = ^ + ^ n n 

eGS 1=1 3 = 1 



N 



k 



0(d), 



where 

S = {e= (ei,j)i<i<k : < e/,j <£-!}. 

l<j<r 

As r < (logp)/ log(4(i) and the Pi's arc multiplicatively independent. Lemma \3l2\ 
implies that the polynomial 

k r 

1=13=1 

cannot be a complete ^-th power for any choice of e € S" unless e is the zero vector. 
Therefore, we can employ Lemma 13.31 in (15.11) to get 



□ 



Proof of Theorem\^ The proof of Theorem [2] follows the same line as that of The- 



orem [T] Let L — L{p) < 



logp 



, and let N ^ /L] - 1. Define 



21og4rf 

i?m,a,fc(i, L) = #{1 < X < L : Ni{iL + X, I) = ai (mod to) VI < Z < k}. 
We have 



^{m,a) t: 



< 



1 ^ 

pfi E 



i=0 



Rm,a.,k{h L) 77 



TO" 



01 i 



Again by Cauchy-Schwarz inequality, 

\ 2 

Rm,a,k{h L) 



f N 

E 



TO" 



TV 



i=0 



< (7V+l)V(i?,„,a,fe(*,i)--^ 



which implies 



<i>(TO,a) 



N + 1 



N 



i=0 



O 



L2 
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Note that 



for all 1 < I < k. To simplify the notations, write 

X X 

E{x, = E p^xiimL + / + j))) - J2 Hx^imL + ])))■ 

3=1 i=i 
Let b = a + {Ni{sL, I))i<i<k, and set 

R'^ ^(i^ L) ^ #{1 < X < L : S(a;, = bi (mod m) VI < Z < fc}, 



then 



(5.2) E(^™^a(*'^) 

aG(Z/mZ)'' i=0 

Since 



N 



L k m—l 



R'^^^ii, ^) - E n E e™(iiS(a;, /) - 

x=l 1=1 t,=0 

a similar calculation as in ()4.6p gives 
E <.^b(*'^)-;;^ 

TV L fc m-1 

=;;;2fcE EnE^"(^'S(-'0-^0-i 



i=0 x = l 1=1 ti=0 
L 



(5.3) 



- F 



E E E M ^ F(.,, ) - y: Pi-'u) - 

x = lt=iO \l=l \j = l 3 = 1 



X #Mp,,...,p,(wi,...,Wfc), 



with w/ = (v;,vj). Substituting (I5.3P back into (|5.2p . applying Proposition 13. It l^ 
and Proposition l5.ll we obtain 

E E ( ^rn,hih L)- — ] < INLm^+^e + OidkLH^'m'^+^^logp), 



ae(Z/mZ)'« 'i=0 

and so 



□ 
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6. The case of restricted domains: proof of Theorem [3] 

In this section we study the case when the domain is restricted to a smaUer 
rectangle Vl = I y. J that satisfies the condition ((*]). For any x G [0,p — 1], define 

I 1 , if x e I and 3y G J so that (x, y) e C, 
10 , otherwise. 

Let X = (xi, . . . , Xr) G [0,p— l]*^, and let v = {vi, . . . , Vr) G {0, 1}'" be a vector. As 
in the proofs of previous theorems, we introduce a set and estimate its size. Define 

Mc,n{'y) = {x e I : L\x, 5c,nix + Xj) = Vj VI < j < r}. 

Remark 6.1. For x G T, one can write down an explicit formula for Sc,nix) involving 
exponential sums. Write the defining equation of C as f{x,y) :— — P{x) = 0. 
Consider 

Then S is the number of points in C fl O. Now our assumption Q guarantees that 
5c,Q.{x) = S{x). This formula was used by Dwork [10] to prove the rationality of 
zeta functions of varieties over finite fields. We will not need this formula in our 
paper. 

In previous sections, we used characters to relate the random walk setting and 
the distribution of number of points on C, which does not allow us to control the 
y-coordinates. To allow restrictions on the domain, we proceed as follows. Let 
% = {hi, . . . , hr} C [0,p — 1] be a set of integers. From the curve C defined by 
()1.H) . we construct the x- shifted curve C-u to be the curve defined by the following 
system of equations: 

yi=P{x + hi) 
yi - P{x + h2) 



yi = P{x + hr). 

It is easy to see that C-h is indeed a curve. The next lemma shows that this curve 
is absolutely irreducible if r is not too large. 

Lemma 6.1. If r < j^^, then C-u is absolutely irreducible. 

Proof. It suffices to show that for any e = (ei, . . . , e^) with < < f — 1, e 7^ 0, 
the combination 

r 

Q{x) = Y[p{x + h,p 

cannot be a complete £-th power, and this is shown in Lemma 13.21 □ 

Let n = I X J' C [0,p — 1]^ be a rectangle, and let iVc,o('H) be the number of 
points on C-h inside f2 with L\x. Since C-u is absolutely irreducible, we can determine 
Nc,o,{T~L) using the idea of generalized Lehmer problem on curves [7]. In particular, 
we have 

'hi I 

NcM = ^ • + 0(^logl«l+V), 
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where \I\ ~ #(2^n Z). Note that Nc,ii{T-C) only depends on the cardmaUty of Ti, 
but not the particular elements m it. Suppose now £7 satisfies then it is easy 
to see that 

Nc.n{n)= ll^cMx + h). 

x£i,L\xhen 

Thus, if 

(6.1) + :x=0 {mod L),x + Xr il} = 0{^), 

then we can estimate Afc,o(v) using Ncni'H) by a combinatorial argument as 
follows. Divide the Xj^s into two disjoint sets according to the corresponding values 
of Vj, say 

(6.2) A = {xj : vj = 1} and B = {xi : vi ^ 0}. 
Then 

#Mc.n(v) ^ n + n (1 - + ^')) + o{vp) 

= E(-i)'^' E n ^(^+^.) + o(v^) 

£Ci3 xeI,L\xXjeAu£ 

= ^(-l)l^liVc,o(^Uf) + 0(Vp) 

We summarize the above results in the following proposition. 

Proposition 6.1. Suppose the domainXxJ^ satisfies ((*]), andletx.= (xi, . . . ,Xr) G 
[0,p — 1]*" such that (16. ip is satisfied. Then for any vi, . . . , v^, we have 

#Mc,n(v) = H . (^my-" my" +o(2^^iog-+v), 

where A and B is as in (|6.2p . /n particular, 

#Mc,n(v) < m +o(2'-^log'-+ip). 

Note that the above proposition is meaningful only when the main term is larger 
than the error term, hence we need the conditions on X, J as stated in Theorem 
131 We are now ready to prove Theorem |3l 

Proof of Theorem\M Let L be a large integer of order o(logp/ log log p), and N = 
[p/L] - 1. Define 

i?c,n,m,o(i, i) = #{1 < a; < L : Nc,Q,{iL + x,I) = a (mod m)} 
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and 

R'r 



{i,L) = #{l<x<L 



'C.,n,m,b 

X X 

^5c,n{iL + I + i) - ^Sc,n{iL + j) = b (mod to) 

VI < / < k}. 

Following a similar calculation as in the proof of Theorem [T] and Theorem [2l we 
arrive at 



1 



TO, a I 

TO 



< 



(6.3) 
and 



N + 1 
N + 1 



i-l N 



a=0 i=0 
rn-1 N 



J2 E r^C,0,m,a(i,L)- - 



f,=0 1=0 



01 i 

P 



(6.4) J2(Rc 



i=0 



TO^ 

L m-1 



E EE^™ ME^("^)-E^K)-^ 



v,v'e{o,i}^ x= 



1 t=i 



X #Mc,n(w), 

where w = (v, v'). This time x = {iL + 1 +1, . . . ,iL + 1 + L,iL + l, . . . ,iL + L), and 
the condition p — i > I > L guarantees that the entries in x are disjoint. Applying 
Proposition 13 . H[ 5|) and Proposition 16 . II to (I6.4p . we obtain 



EE fe,a,™,.(^,i) -^y< 2^"+^mU + 0(2^^v^log^^+ip) 

fc=0 i=0 ^ ^ 

< 4to'* |T| +0(to'^p3+'^) 

for any e > (here we used L = o(logp/ loglogp). Substituting the above back 
into (j6.3p and simplifying, we find that 

m— 1 



a=0 



E i^cAm,a) 



1 



< + 0(TO*/p2-e) < _|_ 0{m^/p^~''). 



p. 



□ 



7. An APPLICATION ON THE DISTRIBUTION OF l-TH POWER RESIDUES AND 

NONRESIDUES 

As an application of our results, we show how they can lead to uniform distri- 
bution results of i-th power residues and nonresidues. First we consider £ — 2. 
Let C to be the curve defined by — x, and let L{p) be a function that tends 
to infinity with p, but of order o(logp/ loglogp), and let / be an integer such 
that p — L{p) > I > L{p). The conditions in Theorem [3] are satisfied if we 
take J = {ap,Pp\ C [0, {p — l)/2] and I ^ In our apphcation, we take 

J = (0, Pp] (;3 < 1/2), I = [0,p - 1 - /] (so that we avoid going back to a; = 0). 
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We say x e F* is a ^-quadratic residue if x = (mod p) for y e (0, /3p], and x is 
a /3-quadratic nonresidue if it is not a /^-quadratic residue. Recall that = X x J^. 
In this setting, a point {x, y) on C H corresponds to the /3-quadratic residue x 
modulo p (note that we manually excluded a; = in our interval T). Therefore, the 
number of points on C H 17 with x e I equals the number of /3-quadratic residues 
in I. Applying Corollary [3] we see that for any positive integer m, the number 
of /3-quadratic residues in [a;o,a;o -I- /) for € I is uniformly distributed modulo 
TO. Since inside an interval of length /, the number of /3-residues and nonresidues 
always sum to /, we obtain uniform distribution for the /3-nonresidues as well. More 
precisely, let i?^ [xq , /) and Njs [xq , /) be the number of /3-residues and nonresidues 
in the interval [a;o,xo -I- /) respectively, and let 

*fl,/3,/(w, a) = ^#{a;o e [0,p- 1 -/] : RpixQ,!) = a (mod to)}, 

^N,f3,i{m,a) = ^#{2^0 e [0,p- 1 - /] : N/^{xo,I) = a (mod to)}. 
Then we have the following. 



uniformly for all < a < m ~ I. The same holds with ^R^p.i{m, a) being replaced 
by ^N,p,ii'rn,a). 

Note that if we take /3 = 1/2, we see that the quadratic residues and nonresidues 
are uniformly distributed among congruence classes modulo to. 

If L{p) is a function that tends to infinity with p, we fix an interval of length 
/ = L{p), and take to = [L(p)-^/'']. For any Xq £ [0,p — 1 — /], there are no 
/3-quadratic residues (resp. nonresidues) inside the interval [xo,xq + I) only if 
Nj3{xo,I) = (mod to) (resp. Np{xQ,I) = I (mod to)). By Corollary [SJ there are 
at most 



such values of xq. We thus obtain the following result. 

Corollary 6. Let L{p) be an integer function of p that tends to infinity with p. 
For all xq G [0,p— 1] except possibly 0{p/ LijpY/"^) of them, there is a j3-quadratic 
residue and a /3-nonresidue inside the interval [xq^Xq + L{p)). 

Taking (3—1/2 gives Corollary |4] for the case £ = 2. 

For £ > 2, there is no convenience choice of I, J" such that condition ((*} is 
satisfied, so we use Corollary [1] instead. Consider the curve y^ = x, and argue 
as the case ^ = 2, we see that Nc{xo, I) equals £ times the number of ^-th power 
residue in the interval [xq, xq + I)- Let /x be an ^-th root of unity and let Ri^^{xq, I) 
be the number of a; G [xq, xq -I- /) with - = ^. Define 



Corollary 5. If m = o{L{p)y/^), then 





^£,11,1(1^1,0) = -#{a;o e [0,p- 1] : i?f,p(a;o,/) = a (mod m)}. 



22 



KIT-HO MAK AND ALEXANDRU ZAHARESCU 



Invoking Corollary [l] for GCD{£,m) — 1 and m — o(L(p)^/^), we have 



(7.1) + 

For other /i 7^ 1, we let /I be its inverse modulo p and consider the curve — fix 
to get a similar equation as ()7.ip that is true with fi in place of 1 in the subindex. 
We sum them up in the following proposition. 

Proposition 7.1. IfGCD{m,e) = 1 and m = o{L{p)y^^), then 



uniformly for all < a < m — 1 and all £-th root of unity 11. 

If L{p) is a function that tends to infinity with p, we again fix an interval of 
length / = L{p), and take m = [L(p)^/^] (if this m is not relatively prime to i, 
add a small constant to it so that the new m is relatively prime to ^). A similar 
argument as in the case £ — 2 then gives Corollary [4] for the case £ > 2. 
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